Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: 6lo42aav+JctkMkLapw6brGY3SsT++zJ0II8zTiCcs4=
Subject key identifier: B4:8E:9A:53:36:12:9B:4F:0B:B0:5E:21:D7:2A:35:AB:8B:20:48:8B
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019CAC46C90E045F3B23EE92FE32A8A7E31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: 9a9ZJKZDCS/Xu+GUoCjgxehkWdKH7JnLCDJLyeuV9Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c9:0e:04:5f:3b:23:ee:92:fe:32:a8:a7:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=b48e9a5336129b4f0bb05e21d72a35ab8b20488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:44:e2:2f:06:92:ca:b0:69:f2:e7:12:c4:
e9:06:c1:e3:27:22:5c:cd:24:85:cc:1f:05:e9:4a:
b7:06:e1:ba:d4:44:d4:7c:a8:d3:b1:70:f0:ee:01:
ed:b9:cc:87:f9:ec:08:6d:f1:67:46:f7:22:06:9a:
98:c2:ec:e2:ce:0a:4a:e8:ad:d8:21:65:32:38:83:
88:82:80:1f:7f:13:53:f2:d1:ed:24:48:ee:2f:0b:
e6:b5:f8:ff:e2:8d:b8:f2:90:85:96:23:0b:7f:e9:
c0:f3:cb:db:fa:5a:66:84:9d:6a:6a:2f:31:46:09:
25:59:bd:5e:4f:be:84:f2:7c:dd:fd:d1:8c:62:b3:
9a:bc:4c:f3:ad:fc:bd:24:61:bc:34:16:a1:20:04:
9b:d8:92:27:09:6f:e4:0c:4c:e0:da:87:37:c7:61:
6c:0a:03:00:b5:96:5c:f4:11:be:79:af:76:3a:ba:
95:1f:7c:cd:62:e1:4e:06:b3:3c:57:25:b1:de:5c:
55:a8:e6:99:72:9a:2d:3e:46:a1:e5:f8:35:6d:6b:
e8:48:e4:11:c2:ad:5f:15:3f:91:19:da:04:d8:98:
98:fe:42:1a:c6:22:a8:36:70:28:d2:f1:1d:64:60:
c2:83:77:58:f6:9a:3d:18:7f:5e:17:3c:17:b5:d6:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:9A:53:36:12:9B:4F:0B:B0:5E:21:D7:2A:35:AB:8B:20:48:8B
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:bb:55:f3:e9:02:29:4c:f6:92:f7:a2:0c:b8:9a:cb:07:
48:e3:56:ea:05:97:f3:7b:16:28:29:32:cc:91:a9:99:db:88:
b5:55:64:a1:a8:7f:65:2e:03:eb:35:e2:fc:b9:44:00:9a:14:
64:25:18:50:5b:c5:65:ec:f5:bd:eb:f3:cc:66:e0:03:c3:f8:
94:fa:a3:28:d6:d0:e6:e1:99:5f:dd:3e:fb:30:05:76:a8:3f:
ea:42:2f:c5:67:c0:c5:6c:dd:94:ae:26:13:22:43:f4:a5:da:
5e:81:71:98:19:d2:a4:d7:34:1d:ca:9a:86:68:37:86:76:fb:
93:c6:86:31:bf:c3:d1:ff:17:81:85:30:b9:11:d4:ac:71:ef:
51:1b:7b:91:80:1f:49:c5:e1:c0:f3:0d:f0:92:50:ac:62:d2:
2d:86:f3:63:55:af:6b:3c:16:7b:e4:93:de:24:ba:3b:28:5f:
ad:8b:50:dc:06:9b:58:58:99:6b:17:67:66:de:7e:65:c9:56:
a3:aa:24:e4:57:0d:2f:69:49:09:af:aa:27:c4:c6:17:af:6c:
57:a6:0e:59:1e:06:d5:96:f0:53:07:6a:ba:75:8b:3e:cb:ab:
2b:bf:8f:6b:d4:35:8d:ce:11:52:03:73:45:b2:2c:3e:84:44:
1c:24:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:45 2026 by rpki-client